Product by Pallets Click
Palletsprojects Jinja
8 known vulnerabilities in Palletsprojects Jinja (Pallets Click), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-10906 | Palletsprojects Jinja: security vulnerability | 8.6 | |
| High | CVE-2016-10745 | Palletsprojects Jinja: security vulnerability | 8.6 | |
| Medium | CVE-2020-28493 | Regular Expression Denial of Service (ReDoS) | 5.3 | |
| High | CVE-2025-27516 | Jinja sandbox breakout through attr filter selecting format method | 8.8 | |
| Medium | CVE-2024-34064 | Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter | 5.4 | |
| High | CVE-2024-56326 | Jinja has a sandbox breakout through indirect reference to format method | 7.8 | |
| Medium | CVE-2024-22195 | Jinja vulnerable to Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2024-56201 | Jinja has a sandbox breakout through malicious filenames | 8.8 |